• info
• discussion
• exploit
• solution
• references

MyBB Prior to 1.4.2 Multiple Security Vulnerabilities

MyBB is prone to multiple security vulnerabilities, including a cross-site scripting issue and multiple unspecified issues.

Very few details are available regarding these issues. We will update this BID as more information emerges.

An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to MyBB 1.4.2 are vulnerable.